Experts,
Please read the proposed changes to the security chapter (and the
description of the issue) under
http://java.net/jira/browse/EJB_SPEC-101
("Remove restriction on definition of a security-role withing the ejb
deployment descriptor, as an implicit declaration of a corresponding
security-role-reference for the role")
Let me know if you have any concerns.
thanks,
-marina